Giving Others Access to the Cluster

Creating a Distributable Configuration#

Unless you’re planning to be the only person in your organization with the access to the cluster, you’ll need to create a kubectl configuration that you can distribute to your coworkers.

Let’s see the steps.

We went back to the cluster directory, created the sub-directory config, and exported KUBECONFIG variable with the path to the file where we’d like to store the configuration.

Now we can execute kops export.

The output of the latter command is as follows.

Now you can pass that configuration to one of your coworkers, and he’ll have the same access as you.

Truth be told, you should create a new user and a password or, even better, an SSH key and let each user in your organization access the cluster with their own authentication.

You should also create RBAC permissions for each user or a group of users. We won’t go into the steps how to do that since they are already explained in the Securing Kubernetes Clusters chapter.

In the next lesson, we will destroy the cluster we created.